This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
File: RstaoMqemvBSLrXYP_vuf88TePA.mft (raw, json)
Hash identifier: ggCBr0w8uX50IIyo4PmfXvnokv9ecwNFdsb6w2Sphfg=
Subject key identifier: 53:F2:7C:C4:34:1B:CD:81:AC:C7:2A:BA:E2:E1:C0:94:6E:F9:27:A6
Authority key identifier: 46:CB:5A:A0:CA:9E:9A:F0:52:2E:B5:D8:3F:FB:EE:7F:CF:13:78:F0
Certificate issuer: /CN=46CB5AA0CA9E9AF0522EB5D83FFBEE7FCF1378F0
Certificate serial: 19BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
Manifest number: 19BB
Signing time: Mon 19 Jan 2026 09:56:17 +0000
Manifest this update: Mon 19 Jan 2026 09:56:17 +0000
Manifest next update: Mon 19 Jan 2026 15:56:17 +0000
Files and hashes: 1: RstaoMqemvBSLrXYP_vuf88TePA.crl (hash: a10RwKtE+xnw2EMdYk+u48AsE8qXGvZ1QlGbnHjXh1Y=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 15:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6587 (0x19bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46CB5AA0CA9E9AF0522EB5D83FFBEE7FCF1378F0
Validity
Not Before: Jan 19 09:56:17 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=53F27CC4341BCD81ACC72ABAE2E1C0946EF927A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:85:e8:31:1b:ff:ba:8e:dc:fb:06:27:33:
ac:08:85:14:9c:7c:c2:7c:31:55:a6:15:88:4a:b5:
63:b1:64:dc:68:ea:35:4e:1b:da:d1:10:02:4e:02:
8c:22:9e:e7:e1:0e:52:5d:73:9b:1a:49:cd:cc:4b:
c2:f4:7e:43:da:44:f5:89:74:a1:b1:ed:01:b4:13:
02:8a:d9:4c:dd:00:bd:f3:a0:8f:f5:9d:8d:2a:a6:
62:dd:af:2f:c3:ed:cf:88:0e:f3:31:1b:6f:a4:b2:
7b:54:61:19:74:6f:5b:43:58:24:38:c9:06:2d:fb:
58:46:b3:fc:2a:9f:e0:2c:c4:6c:3e:17:61:e2:9a:
ec:f7:3f:19:39:16:3d:dc:f4:01:99:b0:73:42:11:
43:85:9d:60:97:cc:96:9c:f8:1c:15:1b:b4:81:d8:
c5:7d:d1:00:ad:55:f2:c8:60:45:65:60:fb:79:bc:
b4:81:b4:dc:b9:82:34:a6:72:5b:77:99:87:82:eb:
be:42:23:47:e0:5b:1f:d5:d0:89:95:5b:d0:78:48:
79:ca:8d:98:cf:a7:7d:73:e0:8a:90:8f:8a:7c:1e:
9a:58:c7:4d:cd:55:e6:b0:4b:8d:c7:ab:65:50:c3:
8e:50:6d:77:f7:4d:0e:7d:df:49:25:fb:5d:86:18:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F2:7C:C4:34:1B:CD:81:AC:C7:2A:BA:E2:E1:C0:94:6E:F9:27:A6
X509v3 Authority Key Identifier:
keyid:46:CB:5A:A0:CA:9E:9A:F0:52:2E:B5:D8:3F:FB:EE:7F:CF:13:78:F0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RstaoMqemvBSLrXYP_vuf88TePA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1/RstaoMqemvBSLrXYP_vuf88TePA.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:90:b4:ee:8d:79:be:15:d5:0c:a5:c4:d6:2c:d4:43:98:3a:
0c:64:8f:b3:dc:2b:84:ac:e3:5b:4c:1a:d0:00:ba:33:bc:2b:
a4:af:ee:6e:c5:11:47:8c:d3:ab:cd:52:b3:cc:cf:8f:b4:68:
2e:67:53:b2:c7:05:51:b9:b6:4d:64:40:52:8d:24:8b:06:c7:
70:c2:46:d7:c0:50:bf:60:c3:ea:c7:64:1d:86:3b:e2:e8:8a:
a2:47:f6:3c:06:c7:c5:e6:14:a9:9f:65:a5:05:88:7c:8d:48:
0b:05:16:8e:9e:1a:76:00:43:9c:9e:98:e8:20:47:0a:00:9f:
ac:1d:cb:0c:41:84:ed:f0:7a:49:6b:6c:dd:9e:4b:93:fc:eb:
1a:05:06:4c:0a:18:38:c4:3b:1d:35:42:7c:b4:0f:94:97:3a:
b5:d0:43:b5:1d:fe:06:9a:7d:f2:62:4a:29:0c:83:4d:a8:2c:
f4:66:4a:0f:ea:26:b9:d2:16:16:59:7f:aa:2b:45:ae:50:dc:
e9:f9:7c:d1:ef:ce:48:b8:17:2a:cf:ac:16:7e:6a:2a:da:13:
e9:c0:d8:e0:d2:73:c9:b5:bc:d5:c8:d4:68:da:f2:38:7e:3f:
4f:bf:94:b9:a6:c6:d3:a1:81:f5:01:95:64:64:f4:41:72:c1:
1d:06:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:57:45 2026 by rpki-client